Uber says PHL users affected by data breach

UBER PHILIPPINES has confirmed to the National Privacy Commission (NPC) that personal data of its Filipino customers and drivers were exposed in a massive data breach involving its parent company Uber Technologies, Inc.

In a statement, Commissioner Raymund E. Liboro said Uber submitted a letter to the NPC on Monday, where the company admitted that personal information of Filipinos were included in the October 2016 data breach that involved 57 million customers and around 600,000 drivers around the world.

“Unfortunately, Uber failed to provide the level of detail that we expect from personal information controllers about data breach notifications, such as the actual number of Filipinos affected, and the scope of their exposure,” Mr. Liboro said.

Uber has been under fire after the company last week admitted it had concealed a data breach in October 2016. Uber also said it paid hackers responsible $ 100,000 to delete the data and keep their silence.

Mr. Liboro said Uber reported its corporate systems were not affected, and there was no indication that trip location history, credit card numbers, bank account numbers, or dates of birth were downloaded.

Uber also admitted that Filipino data subjects were affected, “but there is no indication that any Filipino driver’s licenses were downloaded.”

“Under the principle of accountability, we require personal information controllers within our jurisdiction to provide detailed information on the nature of the incident, the scope of the exposure, and the remedial measures taken,” Mr. Liboro said.

“While Uber has repeatedly asserted that there has been no evidence of fraud or misuse tied to the incident, the concealment of a data breach bears serious consequences under the Data Privacy Act of 2012.”

Mr. Liboro said the hackers and the people responsible for concealing the data breach “may face serious civil and criminal liability.”

“The investigation continues. We are also cooperating with the data privacy authorities of Australia and the United States on this matter,” he said. —